Skip to content

fix: potential exposure of sensitive information in logs #1545

Closed
AmSach/git-bug
#1

Description

@bachdev

Description

The runBridgeAuthShow function logs the value of authentication tokens to the console. This can lead to exposure of sensitive information if logs are accessed by unauthorized users. Logging sensitive data like tokens can be a security risk as it may allow attackers to gain unauthorized access.

Severity: medium
File: commands/bridge/bridge_auth_show.go

Expected Behavior

The code should handle this case properly to avoid unexpected errors or degraded quality.

Activity

  1. MichaelMure commented on Sep 14, 2026

    @MichaelMure
    Contributor

    Imho, that's not an issue. It prints in the console, not logs. If you are in a situation where it's a problem, bypassing this command and reaching directly to the secret is also possible.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions